popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
38641 2021-11-18 13:53 123_3k.exe  

6d1eaa01bd0f3d10232bf630175b839b


RAT Generic Malware PE File PE32 .NET EXE VirusTotal Malware Check memory Checks debugger unpack itself ComputerName 		2.2 46 ZeroCERT

38642 2021-11-18 13:52 1307_1637053872_8294.exe  

5e435815f049849380d659c3acd2d586


RAT PWS .NET framework Generic Malware UPX PE File OS Processor Check PE32 .NET EXE Browser Info Stealer FTP Client Info Stealer VirusTotal Malware suspicious privilege Check memory Checks debugger buffers extracted WMI unpack itself Collect installed applications installed browsers check Windows Browser ComputerName DNS Cryptographic key Software crashed 		1 7.0 36 ZeroCERT

38643 2021-11-18 13:52 http://msg-intl.qy.net/v5/ypt/...  

d41d8cd98f00b204e9800998ecf8427e


AntiDebug AntiVM MSOffice File VirusTotal Malware Code Injection RWX flags setting exploit crash unpack itself Windows utilities Tofsee Windows Exploit DNS crashed 		2 2 2 4.2 C0d3_22

38644 2021-11-18 13:52 bird.png  

b56472432fa955761c7b65e7dee8ef60


UPX PE File OS Processor Check PE32 RCE 		0.8 ZeroCERT

38645 2021-11-18 13:51 15_1637082780_2946.exe  

9733aef1c8ec194a3198ab8e0130b7d4


Malicious Library UPX PE File OS Processor Check PE32 VirusTotal Malware PDB unpack itself 		2.0 31 ZeroCERT

38646 2021-11-18 13:50 invoice_0003900000.wbk  

cfeee36c618563537127b7c9c2787c45


Loki RTF File doc LokiBot Malware download VirusTotal Malware c&c Malicious Traffic exploit crash unpack itself Windows Exploit DNS crashed Downloader 		3 3 13 1 4.4 27 ZeroCERT

38647 2021-11-18 13:49 4637_1637095941_5016.exe  

8c96471e0c39a68c73fcd9cf571b9cdc


Malicious Library UPX PE File OS Processor Check PE32 VirusTotal Malware PDB unpack itself 		2.2 43 ZeroCERT

38648 2021-11-18 13:47 balzak.html  

c8975f3bb4a94c035e7b3a4594c8dab0


Generic Malware UPX Antivirus AntiDebug AntiVM PE File OS Processor Check PE32 VirusTotal Malware powershell suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut RWX flags setting unpack itself Windows utilities powershell.exe wrote Check virtual network interfaces suspicious process Windows ComputerName DNS Cryptographic key 		2 2 3 11.8 3 ZeroCERT

38649 2021-11-18 13:34 PCHealthCheck.exe  

c5a267398167c6a47f81a89056761528


Gen2 Generic Malware Malicious Packer Admin Tool (Sysinternals etc ...) Malicious Library UPX PE64 PE File OS Processor Check PDB RCE 		0.4 C0d3_22

38650 2021-11-18 13:16 http://chek.zennolab.com/proxy...  

b6dc5502b3a9e484f096210896f467f5


Create Service DGA Socket Steal credential DNS Internet API Hijack Network Code injection Sniff Audio HTTP KeyLogger FTP Escalate priviledges Downloader ScreenShot Http API P2P persistence AntiDebug AntiVM MSOffice File VirusTotal Malware Code Injection RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		2 2 2 4.6 C0d3_22

38651 2021-11-18 13:10 7wmp0b4s.rsc  

b258374a8e32542b9eba337a3f82f5b1


AntiDebug AntiVM VirusTotal Email Client Info Stealer Malware suspicious privilege Checks debugger Creates shortcut unpack itself installed browsers check Browser Email ComputerName 		3.8 2 C0d3_22

38652 2021-11-18 13:01 t-rex.exe  

d8a71db524074bb8b29928c141a570f9


Malicious Library PE64 PE File VirusTotal Malware 		1.8 44 C0d3_22

38653 2021-11-18 12:55 octafx4setup.exe  

568e1204996456984c05f12de9201168


Gen2 Formbook Generic Malware UPX Malicious Library PE File PE32 OS Processor Check VirusTotal Malware Check memory buffers extracted WMI unpack itself Check virtual network interfaces AppData folder AntiVM_Disk anti-virtualization VM Disk Size Check Tofsee ComputerName RCE DNS 		1 23 1 10.6 1 C0d3_22

38654 2021-11-18 10:43 y76gkOkGrbYHjh.dll  

722f898d814e4d04ed7c41bde6760eff


Emotet Malicious Library UPX PE File OS Processor Check PE32 DLL Dridex TrickBot Malware Report Checks debugger ICMP traffic unpack itself sandbox evasion Kovter ComputerName DNS 		20 6 5.4 블루

38655 2021-11-18 10:29 f59ovCcsI09zqD8KZ0o.dll  

bd63c91ebde9fde16b3ce1b890074baa


PE File PE32 DLL VirusTotal Malware 		1.0 15 Kim.GS

keyword